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© Authentication method and system with a smartcard. 



© This invention relates to a novel smartcard- 
based authentication technique using a smartcard (2) 
that encrypts the time displayed on the card with a 
secret, cryptographically strong key. the (public) 
work station (3) receives as input certain values 
defining the user, the card and a particular value 



derived from the encrypted time and encrypts and/or 
transmits these values to the server (4). The server, 
in turn, computes from received values some poten- 
tial values and compares these to other received 
values. If the server determines a match, an accept 
signal is transmitted to the work station. 



AS 



PWS 



User 



Card 



activate 



TIME, Bc-EtKc.TIME) 



} 



U.SNc.TIMMucNc-PWu 



U.SNc.TIHE.EUu, TINE) 
E(Ku,f (TINE)), E(Kc, f (TINE)) 



EUc, f (TINE)) 



FIG. 3 



(visual) comparison with: 
EUc, f < TINE)) 



Step 1 

Step 2 
Step 3 
Step 4 

Step 5 

Step6 



Rank Xerox (UK) Business Services 

13.10/3.6/3.3. 11 



1 



EP0 566 811 A1 



2 



Field of the Invention 

Broadly speaking, this invention relates to an 
authorization or authentication method in an envi- 
ronment where persons access a computerized 
system via remote terminals, e.g. in a banking 
system or in a data base system with, restricted 
access. In many cases, personal identification num- 
bers (PINs) and smartcards, i.e. devices containing 
a limited processing capability, are used in such 
computerized applications to help or enable 
authenticating a human user who has to identify 
himself/herself to the system 

In a little more detail, this invention relates to a 
novel smartcard-based authentication technique us- 
ing a smartcard that encrypts a running value, e.g. 
the time, displayed on the card with a secret, 
cryptographically strong key. A (public) work sta- 
tion and a server compute, transmit and/or encrypt 
various values to provide a secure channel be- 
tween the human user and the server. 

Background 

User Authentication and Related Exposures 

In order to obtain access rights to system 
resources, a human user needs to prove his iden- 
tity or authenticate himself to the entities that en- 
force access control on protected resources. In a 
distributed system environment, the resources are 
usually remotely located with respect to the user; 
thus, the authentication of the user to the access 
control agent requires the exchange of messages 
that constitute the user authentication protocol. The 
authentication protocol helps the user to prove his 
identity to the authentication server (AS) by dem- 
onstrating his knowledge of a secret (e.g. a pass- 
word or a personal identification number PIN) that 
is shared with the AS. 

User authentication protocols suffer from an 
inherent exposure to masquerading by malicious 
intruders. An intruder can spoof, intercept and re- 
play the authentication messages. In case when a 
secret is sent in clear text (as in most traditional 
log-in procedures) simple spoofing and replay is 
sufficient to break the protocol. More recent pro- 
tocols, as disclosed e.g. by R. Needham and M. 
Schroeder in "Using Encryption for Authentication 
in Large Networks of Computers", Communications 
of the ACM, December 1978, use the user's secret 
as an encryption key or as a seed from which an 
encryption key is derived. 

However, this measure is only partly useful 
because, as described in T. Lomas, L. Gong, J. 
Saltzer and R. Needham in "Reducing Risks from 
Poorly Chosen Keys", Proceedings of ACM Sym- 
posium on Operating System Principles, 1989, 



such an encryption key is weak and can be easily 
broken by wiretappers. This weakness is due to the 
lack of randomness in the way human users 
choose their secrets and to the human beings' 

5 difficulty of remembering perfectly random num- 
bers. In other words, the user's secret is chosen 
_ out of a space that is. relatively small in comparison 
with the minimum key space required by a good 
cryptographic algorithm. Typically, the secret is a 

w password chosen from a dictionary the size of 
which (on the order of 10 s ) is by several orders of 
magnitude smaller than, for example, the one (2 5G ) 
required by the Data Encryption Standard DES 
(National Bureau of Standards: "Federal Informa- 

/5 tion Processing Standards, Publication 46", 1977). 
The cryptographic keys derived from such weak 
secrets can be easily broken by brute force attacks 
with an exhaustive search in the relatively small 
key space from which the secret is chosen. 

20 A practical mechanism for recovering strong 
cryptographic keys using weak secrets without ex- 
posure is provided by smartcards as shown by M. 
Abadi, M. Burrows, C. Kaufman, and B. Lampson, 
"Authentication and Delegation with Smart-cards", 

25 DEC SRC Technical Report 67, October 1990. and 
by H. Konigs, "Cryptographic Identification Meth- 
ods for Smart Cards in the Process of Standardiza- 
tion", IEEE Communications Magazine, June 1991. 

30 Authentication with Smart Cards 

A smartcard is a device with limited processing 
capability that contains a cryptographically strong 
key. Its purpose is to aid user authentication in a 

35 hostile environment. Unlike the weak keys 
(passwords and PINs) used by human beings, the 
smartcard's key is randomly chosen out of the total 
key space of the cryptographic algorithm in use. 
The probability of success with a brute force attack 

m based on exhaustive search in the key space is 
therefore negligible. The user must activate the 
smartcard operation by authenticating himself using 
a weak initial secret but this interaction takes place 
directly between the user and the card (via a card's 

45 key-pad or a protected card reader device) without 
any involvement of untrusted media. Thereafter, all 
data exchanged over the untrusted network is sent 
under the protection afforded by encryption using 
the smartcard's strong secret. Since the card is a 

so simple, non-programmable device (not unlike a cal- 
culator), it is trusted by principals involved. 

Basic Considerations 

55 In this section, the physical characteristics of 

the smartcard design will be addressed in general. 
The following features influence both the cost and 
the security of the smartcard protocols and the 
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smartcard itself. 

Physical Connection: this is the physical 
(electric) coupling that allows the card to commu- 
nicate directly with the work station without involve- 
ment of the user in transfers of information be- 
tween the card and the work station. Also, with a 
galvanic connection, a card needs no power supply 
(battery) of its own since the work station can 
provide it. Unfortunately, the cost of equipping ev- 
ery work station with a secure card reader (and 
every card with a receptor) can be prohibitively 
high, especially in a cost-conscious environment. 

Interaction Complexity: a relevant factor is the 
volume of information that a user must exchange 
with the card. A galvanic connection eases the 
problem since the interface between the card and 
the work station allows for fast information transfer 
without human involvement. Alternatively, when no 
galvanic connection exists, the user must act as an 
intermediary between the card and the work sta- 
tion. To provide increased ease of use, the goal is 
to skew the trade-off towards increased functional 
complexity for minimal interaction complexity. In 
this respect, an ideal protocol with no galvanic 
connection would require the input of one bit on 
the card (e.g., an on/off button and no key-pad) and 
the reading of a number by the user. 

Key-pad: a key-pad may be needed to enter 
into the card the user's secret like a password or a 
PIN. If a card is not equipped with a galvanic 
connection, other information may need to be en- 
tered via a card's key-pad (i.e. in this case, the 
user acts as a conduit between the work station 
and the card). 

Clock: a clock may be required for generating 
timeliness indicators and, possibly, nonces as 
shown by R. Needham and M. Schroeder, "Using 
Encryption for Authentication in Large Networks of 
Computers", Communications of the ACM Decem- 
ber 1978, cited above. However, a clock requires a 
battery which has to be replaced or recharged 
periodically. In M. Abadi. M. Burrows, C. Kaufman, 
B. Lampson, "Authentication and Delegation with 
Smart-cards", DEC SRC Technical Report 67, Oc- 
tober 1990, cited above, the authors suggest that 
"having a clock is particularly difficult because it 
requires a battery". While a battery is indeed re- 
quired, having a clock does not have to present 
difficulties. Nowadays, many personal electronic 
gadgets operate on dry cell batteries without any 
significant penalty in cost or performance. Wrist- 
watches, pocket calculators and hearing aides are 
the most widespread of these. Such devices can 
either require a change of battery every 2-3 years, 
or be disposable. 

Display: a display is imperative when there is 
no electric coupling between a smartcard and a 
work station. With a galvanic connection, however, 



a work station's display may be utilized as de- 
scribed in M. Abadi, M. Burrows, C. Kaufman, B. 
Lampson, "Authentication and Delegation with 
Smart-cards", DEC SRC Technical Report 67, Oc- 

5 tober 1990. 

Non-volatile Storage: stable, non-volatile read- 
. only storage is needed to.stpre the card's secrets, 
e.g., a key or a nonce generator seed, ft may also 
be needed to store public key(s) of the certification 

io authority or the authentication server (AS). Some 
designs may also require a non-volatile RAM to 
store secrets or sequence numbers generated at 
run-time. The drawback of maintaining a non-vola- 
tile RAM is the amount of power needed to refresh 

is the memory that is relatively high in comparison 
with the power required by a clock. 

Volatile Storage: temporary, volatile storage is 
necessary to store certificates, session keys, etc., 
for the duration of an authentication session. It is, 

20 of course, desirable to minimize the size of volatile 
storage. 

Encryption/Decryption Ability: the complexity of 
the encryption algorithm influences the cost and 
the performance of the card. One possibility is to 
25 confine the card's ability to a secret one-way func- 
tion only. This simplifies the implementation. 

In the following section, the main issues in- 
volved with the design of smartcard protocols are 
analyzed. 

30 

Protocol Scenarios 

A smartcard protocol can perform either peer- 
to-peer or server-based authentication. 

35 In the peer-to-peer case, the protocol achieves 

the authentication of a user to remote entities that 
control the access to target resources. The smar- 
tcard and the user must therefore possess a pair- 
wise authentication capability with respect to every 

40 remote program which the user may need to ac- 
cess. The pair-wise authentication capability can be 
implemented by a shared secret key with conven- 
tional cryptography (DES) and by the private key of 
the user with a public-key scheme. 

45 In the server-based case, the remote program 
is an authentication server (AS) that provides the 
user's local programs with a pair-wise authentica- 
tion capability which is subsequently used in peer- 
to-peer authentication. A more sophisticated server- 

so based protocol can be designed to perform a two- 
stage authentication a la Kerberos, as disclosed by 
J. Steiner in "The Kerberos Network Authentication 
Service Overview", MIT Project Athena RFC, Draft 
1. April 1989, whereby the initial phase of the 

55 protocol is dedicated to the authentication of the 
human user and to the delegation of his rights to 
the local programs and the subsequent phases to 
the server-based authentication of the user's pro- 
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grams accessing remote programs. The initial 
phase of this protocol always involves the smar- 
tcard and an authentication server whereas the 
server-based authentication between the user's 
programs and the remote ones may not require 
smartcard interaction and use the credentials dele- 
gated during" the first phase. . ■ . • • 

Conversely, the protocols may also vary de- 
pending on the smartcard's involvement in the au- 
thentication process. In one extreme, the smartcard 
may keep the total control of all the authentication 
exchanges between the local and remote programs 
whereas in the other extreme the smartcard's in- 
volvement may be kept at a minimum by its utiliza- 
tion in the authentication of the user and in the 
delegation of the user's rights to local programs 
only. 

Symmetrical versus Asymmetrical Cryptogra- 
phy: many existing smartcard schemes employ 
asymmetrical (public key) cryptography. This has 
the main drawback that public key encryption re- 
mains quite expensive in terms of both implemen- 
tation and performance. On the other hand, smar- 
tcard techniques employing conventional symmetri- 
cal encryption suffer from heavy administrative bur- 
den owing to the need to maintain a per card 
record at the AS in addition to user records con- 
taining passwords. 

Further to the literature cited above, the follow- 
ing publications are related. 

W. Diffie and M. Hellman, "New Directions in 
Cryptography", IEEE transactions on, Information 
Theory, November 1976. 

R. Rivest, "The MD4 Message Digest Algo- 
rithm", Proceedings of CRYPTO'90, August 1990. 

R. Rivest, A. Shamir and L. Adleman, "A Meth- 
od for Obtaining Digital Signatures and Public Key 
Cryptosystems", Communications of the ACM, 
February 1978. 

As described above and apparent from the 
references, there are various systems available that 
use smartcards. Existing smartcard designs as de- 
scribed e.g. by M. Abadi et al, cited above, use a 
delegation technique whereby the card acts on 
behalf of the user by deploying its strong cryp- 
tographic capability. Nonetheless, before the card 
can run any protocol on behalf of the user, the 
latter has to authenticate himself to the card. 

Some early smartcard designs did not involve 
any such authentication; mere possession of the 
"personalized" card identified the user. Other, 
more recent designs require some interaction be- 
tween the user and his smartcard. The main dis- 
advantage of the delegation scheme is the need for 
a fixed relationship between the smartcard and the 
user. The drawback of such a relationship is 
twofold. 



First, there is a requirement for the card's 
capability to authenticate the user: the smartcard 
must contain the user's secret in order to authen- 
ticate the user. This requirement implies the need 

5 to define the user secrets (password or PIN) at the 
time where these secrets are stored in the card, 
e.g. when. the. card js manufactured or when the 
card's memory is programmed. This reduces the 
user's ability to change his secrets with the ability 

10 to update the card's storage. 

Second, there is an administrative burden of 
maintaining the card-user relationship: since the 
card is acting on behalf of the user with respect to 
external parties, the relationship between the card 

75 and the user must be corroborated and protected 
by the administration so that all transactions per- 
formed by a card can be accounted as performed 
by the associated human user. In order to maintain 
such a relationship the administration that delivers 

20 cards must assure a safe distribution, update and 
revocation of the smartcards. 

The disadvantages of the existing smartcard 
designs that are due to the fixed card-user relation- 
ship are overcome by the novel technique pre- 

25 sented here. The smartcard according to this in- 
vention is not personalized. It is used only as a 
mechanism to obtain a secure channel between the 
user and the remote authenticating party. Accord- 
ing to the invention, the smartcard's identity is not 

30 associated with any user. Consequently, with this 
new concept, the registration of the user's secret in 
the smartcard, the safe distribution of cards to 
users and the protection of smartcards by the 
users are not needed and smartcards can even be 

35 shared by several users without causing any expo- 
sure. 

Summary of the Invention 

40 The present invention is a new smartcard- 

based authentication technique. One main feature 
of this technique is that the smartcard and the 
human user are not tied together. This property is 
obtained by using the smartcard not as a repre- 

45 sentative of the user's identity but only as a means 
to provide a cryptographically secure channel be- 
tween the user and the remote AS. These goals 
lead to a design of a new authentication protocol 
with the following objectives. 

so The protocol must be suitable for the existing 

computing environments consisting of simple work 
stations with no special security device like pro- 
tected smartcard readers. 

The protocol requirements are to be kept mini- 

55 mal by avoiding public key cryptography and ex- 
pensive card features. 

The protocol must be secure against possible 
attacks. 
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To summarize, the invention is a method and a 
system for authenticating a user with a smartcard, 
said system including an authentication server and 
a plurality of distributed work stations or terminals 
connected to the server. The smartcard has a card 
identifier, a running value device (e.g. a clock), 
input and/or output means, , and encrypting- means . 
with a secret card key for encrypting the smar- 
tcard, the user names, user PINs, one or more 
secret keys and, preferably, card identifiers. In 
brief, the following method is performed. 

a. The smartcard indicates the card running 
value and computes a card encryption of this 
indicated running value under its secret card 
key, 

b. the work station receives the user name, the 
card identifier, the card running value, and a 
user authenticator computed from the user's 
personal identifier and the card encryption, 

c. the work station transmits to the server the 
user name, the card running value, the card 
identifier, and an encryption of the card running 
value under the user authenticator, 

d 1. the server determines a potential secret 
card key from the received card identifier and a 
potential personal identifier from the received 
user name, 

62. the server now computes a potential encryp- 
tion of the received running value under the 
potential secret card key, and, combining the 
potential personal identifier and the computed 
encryption, obtains a potential user authentica- 
tor, 

d3. the server then computes a potential encryp- 
tion of the received card running value under the 
potential user authenticator and compares this 
value to the received encryption value of the 
card running value under the user's authentica- 
tor, 

e. if a match of the potential encryption value 
with the received encryption value is deter- 
mined, the server transmits an accept signal to 
the work station concerned. 
Details are disclosed in the following descrip- 
tion of a preferred embodiment of a method and a 
system according to the invention in connection 
with the appended drawings. 

The Drawings 

Fig. 1 depicts a basic scheme for a 

system implementing the in- 
vention; 

Fig. 2 shows a smartcard with an in- 

ternal clock as used with the 
invention; 

Fig. 3 illustrates the method accord- 

ing to the invention in a time 



diagram. 

Figs. 4 and 5 depict two methods of com- 
posing a user authenticator. 

5 Detailed Description of an Embodiment 

. . Fjg. 1 shows a very general, scheme for an 
implementation of the invention. A user 1 with 
his/her smartcard 2 enters a system that includes a 

;o number of public work stations 3 connected to an 
authentication server 4 via one of said work sta- 
tions 3. 

An example for a smartcard 2 is shown in Fig. 
2, which depicts a card with a built-in internal 
75 clock. The following smartcard features are signifi- 
cant. 

No card-user relationship: smartcard 2 is com- 
pletely decoupled from the user. It has no PIN or 
password checking capabilities and acts only as a 

20 means for providing a secure channel between the 
user and the AS. A card can be purchased over the 
counter in a retail shop. There is no buyer registra- 
tion required and users are free to resell, ex- 
change, discard or lend the card to anyone. 

25 No key-pad: since the user enters no data into 

smartcard 2, it has no key-pad but only a button 5, 
a sequence button, to control the sequencing of 
subsequent displays (see below) by the card within 
a single authentication session. 

30 No galvanic connection: smartcard 2 has no 

galvanic connection. No card reader is thus re- 
quired. 

Display: smartcard 2 has a display 6, prefer- 
ably an LCD display. 
35 Clock: smartcard 2 has a built-in clock. The 

clock has not necessarily a dedicated display. The 
running value is displayed (and the display is ac- 
tive) only when the card is on. The clock does not 
need to be particularly precise; second precision is 
40 sufficient for reasons explained below. 

Cryptographic capability: smartcard 2 imple- 
ments a one-way function, e.g. a DES encryption 
with a secret key. However, if a encryption-decryp- 
tion algorithm is used as a one-way function, smar- 
ts tcard 2 does not need to incorporate the entire 
algorithm, encryption alone is sufficient. 

Smartcard's secret: every smartcard 2 pos- 
sesses a secret, Kc, which is computed as Kc = 
E(Kas, SNc), where SNc is the unique serial num- 
50 ber 7 of smartcard 2 and Kas is a card key 
generation key, a secret key known only to the AS. 
At the time of manufacture, each card is assigned 
a unique SNc and a corresponding Kc. While Kc is 
a secret value, SNc is not. For example, SNc may 
55 be etched onto every card, not unlike other serial 
numbers on other electronic merchandise, as 
shown in Fig. 2. Even the means for generation of 
SNc's is not necessarily kept secret; it may simply 
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be a monotonous increasing 32-bit (ten-digit) num- 
ber. 

Every legitimate user is identified by a com- 
bination of, first, a unique user (or log-in) name 
and, second, a password or a PIN, i.e. a personal 
identification number. A password may be an al- 
phanumeric string of,, say, eight .characters, while a 
PIN is generally a numeric string (i.e., a decimal 
number) of at most five-six digits in length. For 
clarity's sake, the term PIN is used hereafter to 
mean both password and PIN in their traditional 
sense. 

Every authentication server (AS) 4 is responsi- 
ble for keeping the records of its constituent users. 
A user's record includes, among other things, the 
name and the PIN of the user. For further refine- 
ment, the AS 4 may know only a one-way function 
of the PIN similar to the way some modern operat- 
ing systems store only a one-way function of the 
users' passwords. However, for simplicity's sake, it 
is assumed that the PIN itself is stored by the AS 
4. The only information that AS 4 has to know 
about all smartcards is the card key generation 
key. Kas. AS 4 does not keep track of the identities 
or secrets of individual smartcards. 

The goals of the method here implemented are 
twofold. First, the method must provide mutual 
authentication of the AS and the user. (Workstation 
authentication is not taken into account here, but a 
basic protocol can be easily extended to provide 
it.) Second, the method must provide for delegation 
of the user's identity to the work station for a 
limited duration. 

The protocol implementing the method accord- 
ing to the invention consists of the following steps 
which are depicted in Fig. 3. 

Step 1 

User 1 begins by activating or turning on smar- 
tcard 2 using sequence button 5 (Fig. 2) on the 
card. The card immediately computes and dis- 
plays, either sequentially or simultaneously, two 
values to the user: 
TIME, which is the current time. 

Nc = E(Kc.TIME), i.e. an encryption of the 
current time under Kc, the secret key of the card. 
Throughout the rest of this section this value is 
referred to as Nc. Although time is predictable or 
easily guessed, its encryption under a strong se- 
cret key is random and unpredictable. Furthermore, 
as a clock doesn't run backwards, Nc is guar- 
anteed to be unique. Hence, Nc can be considered 
a "strong" nonce. 



Step 2 

The user supplies the following values to the 
work station: 

5 U : User name; and SNc : Serial number of the 
card; 

TIME. : Current time taken from .the card's display: . 
Ku : user's authenticator, preferably computed as: 
Ku = Nc - PINu, where PINu is the user's PIN. The 

10 main assumption in this step is that it is fairly easy 
for the user to compute the difference between Nc 
and PINu. Moreover, it is not necessarily an 
arithmetic difference that the user has to compute. 
For each digit of Nc it suffices to enter the dif- 

is ference between that particular digit and the cor- 
responding digit of the PIN. Ku is a one-time cre- 
dential that delegates the identity of the user to the 
work station without disclosing the PIN to the work 
station. The work station can use Ku to act on 

20 behalf of the user beyond the user's authentication 
session, for instance, as a key encryption key to 
get pair-wise keys from AS 4 to communicate with 
other systems. The validity of Ku is limited in time, 
because it is computed as a secret function of the 

25 current time value. The lifetime of Ku can be de- 
fined as (TIME + lifetime) or included as an explicit 
value in the expression of Ku. 

Step 3 

30 

Now work station 3 sends to AS 4: 
U, SNc, TIME : All unmodified from previous step 2 
Kp « E(Ku.TIME) : Encryption of TIME under Ku. 
Here, it is assumed that Ku forms a valid encryp- 

35 tion key. By sending this value, work station 3 
proves to AS 4 that it was granted a valid one-time 
credential by user 1, i.e. Ku, without disclosing the 
value of the latter. 

The AS uses the received SNc and Kas to 

40 compute a potential Kc, named Kc'. Next, it com- 
putes a potential Nc' = E(Kc'.TlME), using the 
TIME received from work station 3. Using U, AS 
looks up a potential personal identifier PINu' and 
obtains a potential user authenticator Ku' = Nc'- 

45 PINu'. 

Then, the AS recomputes a potential encryp- 
tion Np* = E(Ku',TIME) and compares it with its 
counterpart Np supplied by the work station in 
previous step 2. If there is a match, AS 4 replies to 

so work station 3 with an accept signal. 

The above steps 1 through 3 define the core of 
the invention. The reply by AS 4 to public work 
station 3 may have different forms. A preferred 
example is given below, including steps 4 through 

55 6. 
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Step 4 

AS 4 replies to work station 3 with: 
E(Ku,f(TIME)) : Encryption of ((TIME) under Ku 
whereby the function f is a simple arithmetic func- 
tion, e.g., one's complement. 

. . E(Kc.f(Tlly1E)) ; Encryption of fCTlME). under Kc. .. 

In this step, AS 4 is simultaneously assured of 
the freshness and the authenticity of the message 
it received. The authentication of both the smar- 
tcard and the user is attained by recomputing E- 
(Ku.TIME). This is because Ku is uniquely depen- 
dent on SNc, Nc and PINu. Freshness is confirmed 
as a part of the same sequence of checks since Nc 
depends on a particular TIME value. Furthermore, 
the clear text TIME field can be validated before 
any other checks are made. (One may recall that 
loose time synchronization between smartcards 2 
and autorization servers 4 is assumed, i.e. there is 
a maximum time skew.) 

Step 5 

The work station optionally verifies E(Ku,f- 
(TIME)) and displays E(Kc,f(TIME)) on the screen. 
This step assures the work station that someone, 
presumably AS 4, possesses Ku. 

Step € 

In order to perform his own verification of AS 4, 
the user pushes the smartcard's sequence button 5 
and reads the authentication value expected from 
the AS E(Kc,f(TIME)), on smartcard display 6 and 
performs a visual comparison of this value with the 
corresponding value sent by AS 4 and displayed 
by work station 3, (cf. previous step). 

If the two values match, the authentication is 
completed. The goal of this comparison is to as- 
sure user 1 that he/she has, in fact, been commu- 
nicating with AS 4, since no one but AS 4 and 
smartcard 2 at hand can compute E(Kc,f(TIME)). 

It is important to clarify the meaning of the last 
step. Most (if not all) existing smartcard-based au- 
thentication protocols only provide for the authen- 
tication user-to-AS, but not AS-to-user. The pro- 
tocol above provides for bidirectional authentica- 
tion. However, if AS-to-user authentication is not 
desired, user 1 is free to forego the last step 
entirely. 

Finally, user 1 may turn smartcard 2 off by 
pushing sequence button 5 the last time for this 
session. 

The whole protocol is illustrated pictorially in 
Rg. 3. 



Usability Concerns 

The main usability concern in the above 
scheme has to do with the interaction complexity of 

s the authentication protocol, i.e., the number of op- 
erations imposed on the human user. These oper- 

. . ations include:. • 
Entering SNc and TIME into the work station. 

Composing Ku from PIN and Nc and entering 

w Ku into the work station. 

(Optional) visual comparison of E(Kc,f(TIME)) 
displayed by the work station and its counterpart 
displayed by the smartcard. 

Of these three operations, only the first two are 

75 labor-intensive; the third is strictly optional. In the 
first operation, SNc is read directly from the smar- 
tcard as a decimal number of, say, 10 digits. The 
time can also be entered directly as a decimal 
number (e.g., 12:35.02). Alternatively, the work sta- 

20 tion can be programmed to display its own time 
(which is assumed to be fairly close to the time 
kept by the smartcard) and the user can modify the 
displayed value to match the one shown by the 
smartcard. 

25 The heaviest burden placed on the human user 
is the composition of Ku. In the remainder of this 
section, the techniques for easing this task will be 
discussed. 

In the protocol description above, Nc is as- 

30 sumed to be an 8-byte number that can be repre- 
sented by 20 decimal digits. Assuming that the PIN 
is a 6-digrt decimal number, the user can obtain Ku 
in two alternative ways. (Of course, there are many 
other variations possible as well.) 

35 The user subtracts digit-by-digit his PIN form 
the first six digits of Nc. For example, the first six 
digits of Nc can be displayed highlighted in order 
to ease visual operations. Ku is then entered by the 
user to the work station as the six decimal digits 

40 resulting from the subtraction followed by the four- 
teen remaining digits of Nc. Fig. 4 gives an exam- 
ple for composing Ku in that way. Of course, this 
method requires the ability to perform subtraction 
of six decimal digits digit-by-digit (modulo 10). Part 

45 A of Ku in Fig. 4 is obtained from the first six digits 
of Nc; part B of Ku is simply copied as the last 
fourteen digits of Nc. 

There may be reasons one may want to avoid 
even such a simple subtraction of two single-digit 

so numbers. In that case, the goal is to prevent a user 
from writing things down on a piece of paper or 
using a work station-provided calculator. One sim- 
ple solution to this problem is to have each work 
station display on its screen (or attached to it 

55 physically) a simple 10-by-10 table of single-digit 
decimal numbers and their differences (e.g. row 9, 
column 6 will display 3). 



7 



13 



EP0 566 811 A1 



14 



Alternatively, as shown in Rg. 5, the display 
area of the smartcard can be labelled so that each 
digit of Nc is associated with a fixed number 
(index) carved on the plastic or printed on the LCD. 
The first ten digits of Nc are thus numbered from 0 
to 9. Using each digit of his PIN as an index, the 
.user reads the Nc digit displayed below. the label, 
corresponding to the value of the PIN digit. Each 
PIN digit thus points to an Nc digit that is entered 
to the work station to form the first six digits of Ku. 
The remaining ten digits of Ku are copied directly 
as the last ten digits of Nc. In Fig. 5, part C of Ku 
is obtained from the first ten digits of Nc and part 
D of Ku is copied as the last ten digits of Nc. The 
advantage of this scheme is that no arithmetic is 
required from the user. 

The resulting Ku is only sixteen digits which 
reduces its width to 56 bits, from Nc's 64 bits. 
However, the Data Encryption Standard (DES) 
specifies 56-bit encryption keys. 

Analysis 

In this section, the protocol presented above 
shall be analyzed. The following assumptions are 
made: 

Every smartcard's secret, Kc, is a strong key. The 
derivation of Kc from Kas can be designed to be as 
strong as required by a particular application be- 
cause there is no limit on the complexity of this 
operation that is performed only by the AS as 
opposed to other operations that are also per- 
formed by the smartcard. 

The smartcard is trusted to faithfully display 
appropriate values. 

It is difficult to subvert the smartcard's hard- 
ware and obtain the secret (Kc) or otherwise ma- 
nipulate the card, e.g. set back the clock. 

The smartcard clock or other running value 
device is assumed to be monotonous increasing. 

The smartcard can be stolen. 

Any public work station can be taken over by a 
hostile party. All communication involving a work 
station is subject to interception and divulgement 
and the work station may contain trojan horse pro- 
grams that disclose all the information entered by 
the user into the work station or sent by the AS. 

A bona fide registered user may turn malicious 
-- his purpose may be to discover other users' 
secrets, e.g. by letting them use his smartcard. 

The main purpose of this analysis is show that 
the protocol achieves three goals. Goal one is that 
the AS believes that it is talking to a particular user 
U at a particular time T through a particular smar- 
tcard C. More formally, this can be stated as fol- 
lows. AS believes that U recently generated Ku 
using C. Applying the above assumption that only 
U and the AS know PINu and no two smartcards 



share the same key, only C can generate Nc = E- 
(Kc.T) and, hence, only U can compute Ku = Nc- 
PINu. 

Goal two is that the user U believes that he/she 
5 is talking to AS at time T. Again, more formally, 
this can be stated as follows. U believes that AS 
. . recently generated E(Kc.f(T)). Assuming that f is 
one-to-one, e.g. one's complement, f(T) does not 
form a valid time stamp. Therefore, E(Kc,f(T)) could 
io not have been generated by C in the past. Using 
the assumption that only the AS and C know Kc, U 
is assured that AS's communication is authentic 
and timely. 

There is, however, a small caveat. Since the 

15 smartcard has no knowledge of its immediate user, 
its challenge value. E(Kc,f(T)), can not be depen- 
dent on the user; neither can the AS's response to 
that challenge. Therefore, if two well-meaning (and 
even mutually trusting) users decide to save time 

20 by activating the smartcard only once for both log- 
ins, the second part of the message returned by 
the AS (E(Kc,f(T))) will be identical in both cases. 
This implies that a malicious work station can mis- 
lead one of the two users into believing that he/she 

25 is talking to the AS. 

The third important goal is that PINu should not 
be discoverable by an intruder. The user enters 
PINu indirectly in step 2 of the protocol. Since Ku 
is the only value dependent on the PIN in the 

30 entire protocol, the only venue for obtaining the 
PIN is from Ku. This is reasonable, since one of the 
assumptions is that a work station may turn mali 1 
cious and try to misuse Ku. However, in order to 
extract the PIN from Ku, the knowledge of Nc is 

35 required; one may recall that Ku = Nc-PINu. But, 
Nc is known only to the AS, the smartcard, and the 
user. 

One of the principal assumptions is that the 
smartcard clock never runs backward. It guarantees 

40 that Nc are never "recycled", i.e. every Nc is 
unique and unpredictable. Therefore, although a 
work station may accumulate a number of Ku val- 
ues for the same user or many different users, it is 
not able to extract a single PIN, since in all Ku 

45 values, a PIN is masked by a nonce. 

The case of a shared smartcard must also be 
considered. If two users, A and B share the same 
smartcard, the issue is whether it is possible for 
one of them, say A, to discover the other's, say 

so B's, PIN. It is fair to assume that user A could 
subvert a public work station and discover B's Ku. 
Then, in order to extract user B's PIN, user A will 
need to obtain the same Nc as was used to com- 
pute B's Ku. A cannot obtain it by manipulating the 

55 smartcard after the fact since Nc values are time- 
dependent. Hence, the only viable method of attack 
is to to look over the shoulder and record Nc the 
"hard way". However, this is an issue in any meth- 
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od. e.g. also in current non-smartcard techniques. 

Advantages of This Invention 

After having discussed a number of issues in 5 
connection with the preferred embodiment, the ad- 
. vantages . of the method and system according to . 
the invention over existing smartcard-based au- 
thentication designs shall be summarized. 

The smartcard is not personalized, i.e., it is not ro 
associated with a particular user. This property 
implies several advantages. First, there is no ad- 
ministration cost; the smartcard does not need to 
be registered under a user's name or sent to a 
particular user with safe courier. Smartcards can be is 
freely purchased over the counter with no special 
registration procedure and subsequently shared or 
exchanged. Second, potential masquerading is pre- 
vented; since a smartcard, by itself, does not re- 
present any user, its theft carries no danger. In 20 
other words, a stolen smartcard can not be mis- 
used in any way to obtain the rights of any of its 
past or future users. Third, there is no PIN storage 
on the card; the user's secret does not need to be 
stored on the card. This eliminates the need for 25 
entering, updating and storing user specific se- 
crets, e.g. passwords, PINs, biometric patterns, on 
the smartcard. This feature leads to a low-cost 
design. 

The smartcard's secret key is not stored in the 30 
AS. This property offers the advantage of a mini- 
mum key management requirement. The AS has to 
keep only one key to be able to retrieve all the 
smartcard keys. The management of the smartcard 
keys has therefore a minimal complexity. The key 35 
storage in the AS is independent of the existing 
card population; addition, update, revocation of 
smartcards and/or their keys have no effect on the 
AS. 

The smartcard protocol described above 40 
achieves the above mentioned goals with minimum 
requirements for smartcard and protocol features. 
No hardware modifications to existing terminal or 
work station equipment seems necessary, i.e. no 
card readers or physical coupling on the work 45 
station, if so desired. Also, the design does not rely 
on public key cryptography or other sophisticated 
encryption algorithms that impose significant ex- 
ecution overhead. Further, only a secret one-way 
function is required, e.g. DES encryption. Finally, 50 
the authentication protocol achieves, if desired, 
more than the traditional user-to-AS authentication. 
It may also provide for a kind of symmetric AS-to- 
user authentication which can be obtained at the 
discretion of the user at minimal cost by a visual 55 
comparison of two numbers. 

While the invention has been shown and de- 
scribed with reference to a preferred embodiment, 



variations and modifications can be made without 
departing from the spirit and scope of the invention 
as laid down in the following claims. 

Claims 

. .1, . A method for authenticating a . user (1) with a . 
smartcard (2) to a system including authentica- 
tion server means (AS, 4) and a plurality of 
distributed work stations or terminals (3) con- 
nected to said server (4), 
said smartcard (2) having a unique card iden- 
tifier (SNc) and including a running value de- 
vice, especially a timing device, input and/or 
output means and encrypting means with a 
secret card key (Kc), 

said server (4) having stored user names (U), 
user personal identifiers (PIN), one or more 
secret keys (Kc and/or Kas), and preferably, 
card identifiers (SNc), 

said method comprising the following steps 

a. the smartcard (2) indicates the card run- 
ning value (TIME) and computes a card 
encryption (Nc) of this indicated running 
value under its secret card key (Kc), Nc = 
E(Kc, TIME), 

b. the work station (3) receives the user 
name (U), the card identifier (SNc), the card 
running value (TIME), and a user authen- 
ticator (Ku) computed from the user's per- 
sonal Identifier (PIN) and the card encryp- 
tion (Nc), 

c. the work station (3) transmits to the serv- 
er (4) the user name (U), the card running 
value (TIME), the card identifier (SNc), and 
an encryption of the card running value 
(TIME) under the user authenticated (Ku), 
Np = E(Ku, TIME), 

dl. the server (4) determines a potential 
secret card key (Kc') from the received card 
identifier (SNc) and a potential personal 
identifier (PIN') from the received user 
name (U), 

d2. the server (4) now computes a potential 
encryption (Nc') of the received running val- 
ue (TIME) under the potential secret card 
key (Kc'), Nc* = E(Kc', TIME), and, combin- 
ing the potential personal identifier (PIN*) 
and the computed encryption (Nc'), obtains 
a potential user authenticator (Ku') p 
d3. the server (4) then computes a potential 
encryption (Np') of the received card run- 
ning value (TIME) under the potential user 
authenticator (Ku'), Np' = E(Ku\ TIME), and 
compares this value (Np') to the received 
encryption value (Np) of the card running 
value (TIME) under the user's authenticator 
(Ku), 
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e. if a match of the potential encryption 
value (Np') with the received encryption val- 
ue (Np) is determined, the server (4) trans- 
mits an accept signal to the work station (3) 
concerned. 5 



2. • The method according, to claim- 1 , wherein the 
secret card key (Kc) of the smartcard (2) is 
derived from the card identifier (SNc) by en- 
crypting it with a server secret key (Kas), the 
server (4) stores user names (U), user personal 
identifiers (PIN), and said server secret key 
(Kas), and the server (4) determines a potential 
secret card key (Kc') from the received card 



a The method according to one or more of the 
preceding claims, further comprising that if a 



match of the potential encryption value (Np') 
with the received encryption value (Np) is de- 
termined, the server (4) computes an encryp- 
tion (Ncf) of a function (f) of the received 
running value (TIME) under the secret card 
key (Kc), Ncf = E(Kc, ffTIME)), and transmits 
.this value to the work station (3) concerned. . • 

9. The method according to claim 7 or 8, wherein 
m the value (Nuf, Ncf) transmitted by the server 

(4) to the work station (3) is displayed to the 
user. 

10. A smartcard (2) for authenticating a user to a 
system, in particular to a system according to 
one or more of the preceding claims, having in 
combination a card identifier (SNc), timing 
means, encryption means, connectable to said 
timing means. 

11. The smartcard of claim 10, further comprising 

- input means enabling card activation, 
and 

- output means, in particular display 
means, for indicating card running value 
and/or an encrypted running value. 

12. The smartcard of claim 10 or 11, further com- 
prising output means, in particular data transfer 
means, for entering the card data into the work 
station (3). 

13. A system for authenticating a user with a smar- 
tcard (2), said system including authentication 
server means (4) and a plurality of distributed 
work stations (3) or terminals connected to 
said server means (4), wherein said smartcard 
(2) has 

- a card identifier (SNc), 

- a running value device, especially a tim- 
ing device, for indicating a card running 
value (TIME). 

- input and/or output means, and 

- encrypting means with a secret card key 
(Kc) for computing an encryption (Nc) of 
this indicated running value under its se- 
cret card key, Nc - E(Kc. TIME), 

each said work station (3) has 

- input means for receiving the user name 
(U), the card identifier (SNc), the card 
running value (TIME), and a user authen- 
ticated (Ku) computed from the user's 
personal identifier (PIN) and the card en- 
cryption (Nc), 

- means for encrypting the card running 
value (TIME) under the user authenticator 
(Ku), Np * E(Ku, TIME), 



identifier (SNc) and the server secret key 15 
(Kas). 

3. The method according to claim 1 or 2, wherein 
the smartcard data resulting from said indicat- 
ing step (a) is electrically or optically entered 20 
into the work station (3), in particular by gal- 
vanic, electromagnetic, and/or optical coupling. 

4. The method according to claim 1 or 2, wherein 
the smartcard data resulting from said indicat- 25 
ing step (a) is mechanically entered into the 
work station (3), in particular by physical user 
input. 

5. The method according to one or more of the 30 
preceding claims, wherein the smartcard (2) 
must be activated, in particular user activated, 
to effect indication of the current running value 
and/or encryption of the current running value 
and/or an output of any of these values. 35 

6. The method according to one or more of the 
preceding claims, further comprising that the 
server (4) validates the received card running 
value (TIME), comparing it to the server's inter- 40 
nal running value, and, if the difference ex- 
ceeds a predetermined size, discontinues pro- 
cessing and/or transmits a message to the 
work station (3) concerned. 

46 

7. The method according to one or more of the 
preceding claims, further comprising that if a 
match of the potential encryption value (Np*) 
with the received encryption value (Np) is de- 
termined, the server (4) computes an encryp- 50 
tion (Nuf) of a function (f) of the received 
running value (TIME) under the received user 
authenticator (Ku), Nuf = E(Ku, ffTIME)), and 
transmits this value to the work station (3) 
concerned. 55 
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- means, connectabl© to said server (4), 
for transmitting to the server the user 
name (U), the card running value (TIME), 
the card identifier (SNc), and the encryp- 
tion of the card running value (TIME) s 
under the user authenticator (Ku), Np = 

... E(Ku.TIME), 
said server means (4) has 

- at least one memory storing user names 

(U), user personal identifiers (PIN), one w 
or more secret keys (Kc and/or Kas), and 
preferably, card identifiers (SNc), 

- means for determining a potential secret 
card key (Kc') from the received card 
identifier (SNc) and a potential personal ;s 
identifier (PIN') from the received user 
name (U), 

- means for computing a potential encryp- 
tion value (Nc') of the received running 
value (TIME) under the potential secret 20 
card key (Kc'), Nc' = E(Kc\ TIME), 

- means for obtaining a potential user au- 
thenticator (Ku') from the potential per- 
sonal identifier (PIN') and the computed 
potential encryption value (Nc') f 25 

- means for computing a potential encryp- 
tion value (Np') of the received card run- 
ning value (TIME) under the potential 
user authenticator (Ku'). Np' = E(Ku\ 
TIME), 30 

- means for comparing this last potential 
value (Np') with the received encryption 
value (Np) 

- means for transmitting a signal to the 
work station (3), which is an accept sig- 35 
nal if this last potential value (Np') 
matches the received encryption value 
(Np), and which is a non-accept signal 
otherwise. 

40 

14. The system of claim 13, wherein the running 
value device in the smartcard (2) is a continu- 
ously running clock. 
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